70,000+ MongoDB Servers Vulnerable to MongoBleed Exploit – PoC Released

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in MongoDB Server is putting tens of thousands of databases worldwide at risk. Dubbed MongoBleed and tracked as CVE-2025-14847, this high-severity flaw allows unauthenticated attackers to remotely extract sensitive data …

Critical 0-Day RCE Vulnerability in Networking Devices Exposes 70,000+ Hosts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical zero-day vulnerability has been discovered in XSpeeder’s SXZOS firmware, affecting tens of thousands of SD-WAN appliances, edge routers, and smart TV controllers deployed globally. The vulnerability, designated PWN-25-01, …

Hackers Exploit Copilot Studio’s New Connected Agents Feature to Gain Backdoor Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft’s newly unveiled “Connected Agents” feature in Copilot Studio, announced at Build 2025, is creating a significant security vulnerability. Attackers are already exploiting to gain unauthorized backdoor access to critical …

EmEditor Editor Website Hacked to Deliver Infostealer Malware in Supply Chain Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A major supply chain attack targeting EmEditor, a widely used text editor software, has exposed millions of users to sophisticated infostealer malware. Between December 19 and December 22, 2025, the …

Silver Fox Hackers Attacking Indian Entities with Income Tax Phishing Lures

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Chinese threat actors operating under the name Silver Fox are targeting Indian organizations through sophisticated phishing campaigns that impersonate legitimate income tax documents. The attack campaign uses authentic-looking Income Tax …

New Phishing Kit with AI-assisted Development Attacking Microsoft Users to Steal Logins

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Spanish-speaking phishing operation targeting Microsoft Outlook users has been active since March 2025, using a sophisticated kit that shows clear indicators of AI-assisted development. The campaign, tracked through a …

Windows Event Logs Reveal the Messy Reality Behind ‘Sophisticated’ Cyberattacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Public reports about cyberattacks often present a polished picture—threat actors working methodically through a well-planned playbook with every action perfectly executed. This perception leads many to believe that modern attackers …

2.5 Million+ Malicious Request From Hackers Attacking Adobe ColdFusion Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A coordinated exploitation campaign that generated more than 2.5 million malicious requests against Adobe ColdFusion servers and 47+ other technology platforms during the Christmas 2025 holiday period. The operation was …

New Vulnerabilities in Bluetooth Headphones Let Hackers Hijack Connected Smartphone

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers have disclosed critical vulnerabilities affecting widely used Bluetooth headphones and earbuds that could allow attackers to eavesdrop on conversations, steal sensitive data, and even hijack connected smartphones. The …